CVE-2018-7445
MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
Published Mar 19, 2018 · updated Jun 16, 2026 · mikrotik routeros
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.
Timeline
Detection, updates, and resolution for this record.
Mar 19, 2018 · Catalog
Detected
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running Ro
Sep 8, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Sep 29, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running Ro
Required action
Apply updates per vendor instructions.
CISA due date Sep 29, 2022
Affected
- cpe mikrotik/routerosversion unspecified
- cpe mikrotik/routeros6.42
- vendor MikroTik RouterOSversion unspecified
Sources
- CISA KEVCVE-2018-7445
In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.
cisa.gov - CVE.orgCVE-2018-7445
Official CVE identifier
cve.org - FIRST EPSSCVE-2018-7445
30-day exploitation probability 60.8%
first.org - Exploit Database44290
Public archive entry. The exploit body is not stored here.
exploit-db.com - NIST NVDCVE-2018-7445
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes pla
nvd.nist.gov